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DUTY CYCLE CORRECTOR FOR A RANDOM NUMBER GENERATOR 
FIELD OF THE INVENTION 

The present invention relates generally to computer security, and more 
specifically to generating an approximately uniform duty cycle in a random 
number generator. 

BACKGROUND OF THE INVENTION 

Random number generator circuits are used in a variety of electronic 
applications. One important application for random number generators is in the 
field of computer security where message data is encrypted and decrypted. 
Cryptography involves the transformation of data into a coded message that is to be 
sent to and decoded only by the intended recipient. Most common cryptographic 
techniques use ciphers (or "keys") used by the sender to encode the message and by 
the receiver to decode the encoded message. Common cipher systems use either a 
single key, one to code and decode a message, or two keys, one to encode the 
message and the other to decode the message. 

The keys used to encode and decode messages are basically binary data 
patterns against which a message is processed or filtered. Effective cipher systems 
require the use of keys that have a sufficiently high number of bits to make 
replication of a key nearly impossible. Furthermore, the data patterns comprising 
the keys must be sufficiently random so that their pattern or the patterns in the 
message encoded by the key cannot be predicted. Effective cryptographic systems 
thus require the use of high quality random number generators to ensure that the 
binary data within a message is transformed in a totally unpredictable manner. In 
general, any lack of randomness in an encryption scheme produces some degree of 
correlation between the coded and uncoded data. This correlation can then be used 
crack the code through techniques such as iterative trial and error predictions of 
possible output patterns based on a coded message. 
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A desirable feature of a binary random number generator is that it output 
one and zero bits in a purely random order. Thus, the value of the output bit at any 
given time should be totally unpredictable. It is desirable that the duty cycle of the 
output of the random number generator be approximately fifty percent over an 
infinite sample size, so that the chance of an output being a logic low (zero) is equal 
to the chance of the output being a logic high (one). It is also desirable for a random 
number generator to exhibit low correlation (e.g., approximately zero correlation) 
between any bit and any other bit, and a flat Fourier distribution among the output 
bits. 

Present known random number generators, however, have a tendency to 
generate an uneven number of zeros or ones over a statistically significant sample 
size. A common reason for prior art random number generators to exhibit an 
unequal duty cycle is that the latches comprising the random number generator 
typically favor one of the two states if.data is latched during a forbidden 
setup/hold time. A common present method of decreasing duty cycle variations in 
random number generators involves the use of a Linear Feedback Shift Register 
(LFSR) at the output stage of a random bit source. 

Figure 1 illustrates an example of a prior art random number generator that 
uses a Linear Feedback Shift Register 104 coupled to the output of a random bit 
source 102. LFSR 104 comprises a number of latches 105 and gates 106 through 
which the output bits from random bit source 102 are propagated. The states of the 
output bits are randomly inverted by gates 106, and the order of the bits is further 
mixed up through feed-back of the bits through latches 105. 

In general, Linear Feedback Shift Registers, such as that illustrated in Figure 
1 possess certain disadvantages and do not fully correct non-level duty cycle 
characteristics exhibited by typical random bit sources. As illustrated by LFSR 104, 
a typical LFSR itself comprises a number of latches and gates. These latches and 
gates will tend to exhibit the same propensity to latch a zero or one in certain 
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circumstances, as the latches in the random bit source 102. Therefore, a typical 
LFSR does not itself produce a uniform duty cycle output of ones and zeros, and 
thus cannot entirely correct any duty cycle variations in a random bit source. 

A further disadvantage of Linear Feedback Shift Registers is the requirement 
of a large number of latches and gates. For example, a 32-bit LFSR, such as shown 
in Figure 1, requires 32 D-type latches, as well as a number of combinatorial gates. 
This adds significantly to the amount of silicon area required for a random number 
generator circuit that uses such an LFSR. 
SUMMARY OF THE INVENTION 

A method and apparatus is disclosed for producing a corrected bit stream 
from a random bit stream output by a random bit source. Sequential pairs of bits in 
the random bit stream are compared. If both bits in a pair of bits are identical, the 
output bits are discarded. If both bits in a pair of bits are different, one bit of the 
pair of bits is taken as the output bit. 

Other features and advantages of the present invention will be apparent 
from the accompanying drawings and from the detailed description that follows. 
BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example and not limitation in 
the figures of the accompanying drawings, in which like references indicate similar 
elements, and in which: 

Figure 1 is a conventional random number generator using a Linear 
Feedback Shift Register; 

Figure 2 is a block diagram of a random bit source and one embodiment of a 
duty cycle corrector; 

Figure 3 is a logic diagram of one embodiment of the duty cycle corrector of 
Figure 2; 

Figure 4 is flow chart illustrating the operation of the duty cycle corrector of 
Figure 2; 
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Figure 5 illustrates an example of the corrected bit pattern generated by the 
duty cycle corrector of Figure 3; 

Figure 6 is a logic diagram of another embodiment of the duty cycle corrector 
of Figure 2; 

Figure 7 is flow chart illustrating the operation of the duty cycle corrector of 
Figure 6; 

Figure 8 illustrates an example of the corrected bit pattern generated by the 
duty cycle corrector of Figure 6; 

Figure 9 is a logic diagram of one embodiment of the duty cycle corrector of 
Figure 2; 

Figure 10 is flow chart illustrating the operation of the duty cycle corrector of 
Figure 10; 

Figure 11 illustrates an example of the corrected bit pattern generated by the 
duty cycle corrector of Figure 9; 

Figure 12 is a logic diagram of one embodiment of the duty cycle corrector of 
Figure 2; 

Figure 13 is flow chart illustrating the operation of the duty cycle corrector of 
Figure 12; 

Figure 14 illustrates an example of the corrected bit pattern generated by the 
duty cycle corrector of Figure 12; and 

Figure 15 is a block diagram of a computer network that uses a bit pairing 
system for data encryption/ decryption according to an embodiment of the present 
invention. 

DETAILED DESCRIPTION 

A duty cycle corrector for use in a random number generator is described. In 
one embodiment, sequential pairs of bits output from the random bit source are 
processed by the duty cycle corrector. If both bits in a pair of bits are identical, the 
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duty cycle corrector discards or does not output the pair of bits. If the bits in a pair 
of bits are different, the duty cycle corrector outputs one of the bits in the bit pair. 

It is an intended advantage of embodiments of the invention to provide a 
circuit that produces an approximately uniform duty cycle for the output of a 
random bit source. It is a further intended advantage of embodiments of the 
invention to provide a random number generator that requires a reduced amount of 
silicon area when implemented in an integrated circuit device. 

Recall that a random bit source is a digital circuit that outputs a series of 
binary digits in a presumably random order. In an ideal random bit source, the 
probability that a given output bit will be a zero is equal to the probability that it 
will be a one. That is, the duty cycle of the output waveform of the random bit 
source will be uniformly fifty percent over a statistically significant sample size. 
However, most random bit sources exhibit some variation in duty cycle due to a 
tendency of latches and gates within random bit source to latch to a particular logic 
level when data is latched during a forbidden hold or setup time. 

The probability that a given bit will be output at a particular time by a 
random bit source can be expressed by certain mathematical relationships. For 
example, if the probability that the output will be a zero (P(0)) is p, then the 
probability that the output will be a one (P(l)) is 1-p. That is, 

Probability of generating a zero: P(0) = p 
Probability of generating a one: P(l) = 1-p 

For an ideal random bit source p is 50 percent. For non-ideal random bit source, p 
may be substantially greater than or less than 50 percent. 

If sequential output bits of the random bit source are considered in pairs, the 
probabilities become: 
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Probability of generating a zero, zero: P(00) = P(0)P(0) = p 2 
Probability of generating a zero, one: P(01) = P(0)P(1) = p(l-p) 
Probability of generating a one, zero: P(10) = P(1)P(0) = (l-p)p 
Probability of generating a one, one: P(ll) = P(1)P(1) = (1-p) 2 

Mathematically, the probabilities of generating either a 0, 1 output pair or a 
1, 0 output bit pair are equal, as can be seen in the above probability equations. 
That is, since p(l-p) = (l-p)p, then P(01) = P(10). 

This property is true regardless of the probability of the random bit source 
producing a one or zero for any given output. Thus, even if p does not equal 50 
percent for a particular random bit source, the probability that the random bit 
source will produce a zero-one output pair is equal to the probability that it will 
produce a one-zero output pair. In one embodiment of the present invention, this 
principle is used to correct the output of a random bit source that exhibits a non- 
uniform duty cycle and generates an unequal distribution of zeros and ones in a 
given output bit stream. 

In one method of the present invention, a duty cycle corrector processes bit 
pairs output from a random bit source to determine a corrected, substantially 
uniform bit stream. In one embodiment, if both bits in a pair of bits are identical, 
then that pair is discarded and not output by the duty cycle corrector as part of the 
corrected bit stream. Thus, if both bits in a pair of output bits are zero, this pair is 
discarded. Likewise, if both bits in a pair of output bits are one, this pair is 
discarded. If, however, the bits in a pair of output bits are different, the duty cycle 
corrector outputs one of the bits in the pair as a bit in the corrected bit stream. In 
one embodiment, the duty cycle corrector outputs the first bit in a dissimilar pair of 
bits as the corrected bit. Thus, for this embodiment, if the output pair is zero-one, 
the corrected bit is set to zero; and if the output pair is one-zero, the corrected bit is 
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set to one. The corrected bit values corresponding to the various paired cases can 
be represented by the following relationships: 



P(00) 


= P(0)P(0) 


= P 2 


Rejected Case 


P(01) 


= P(0)P(1) 


= P(1-P) 


Logical 0 output 


P(10) 


= P(1)P(0) 


- (1-P)P 


Logical 1 output 


P(ll) 


= P(1)P(1) 


= (1-P) 2 


Rejected Case 



In an alternative embodiment the duty cycle corrector outputs the second bit 
in a dissimilar pair of bits as the correct bit. Thus, for this embodiment, if the 
output pair is zero-one, the corrected bit is set to one; and if the output pair is one- 
zero, the corrected bit is set to zero. The corrected bit values corresponding to the 
various paired cases for this alternative embodiment can be represented by the 
following relationships: 



P(00) = P(0)P(0) = p2 
P(01) = P(0)P(1) = p(l-p) 
P(10) = P(1)P(0) = (l-p)p 
P(ll) = P(1)P(1) = (l-p)2 



Rejected Case 
Logical 1 output 
Logical 0 output 
Rejected Case 



Figure 2 shows one embodiment of a duty cycle corrector 200 that 
implements the embodiments described above to produce a substantially uniform 
bit stream from a random bit source 202 while using fewer gates than previous 
LFSR circuits. Random bit source 202 may be any random bit source that outputs a 
random stream of bits to signal line 222. In one embodiment of the present 
invention, random bit source 202 is implemented as a latch circuit that uses a 
randomly varying low speed clock signal to periodically latch a high speed 
oscillating signal. The value of the output bit from the random bit source latch 
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depends on the voltage level of the high speed signal when it is latched by the low 
speed signal. Random bit source 202 may also generate a clock or strobe signal 
CLK on signal line 216 as generally known in the art. 

Duty cycle corrector 200 includes storage elements 204 and 206, compare 
circuit 208, validation logic 210, and an output circuit 212. Storage circuits 204 and 
206 store pairs of successive bits in the random bit stream output from random bit 
source 202 for comparison by compare circuit 208. In a first clock cycle of CLK, the 
first bit in a pair of bits is stored in storage circuit 204. In a later clock cycle, the first 
bit is stored in storage circuit 206 while the next bit output from random bit source 
202 is stored in storage circuit 204. Storage circuits 204 and 206 may be any type of 
storage elements including latches, registers, volatile or non-volatile memory cells, 
and the like. 

The bits stored in storage circuits 204 and 206 are compared by compare 
circuit 208. Compare circuit 208 may be any type of compare circuit including an 
XOR gate or a comparator. If both bits are equal, compare circuit 208 asserts the 
ACCEPT signal on signal line 220 to a high logic state. If both bits are not equal, 
however, compare circuit 208 deasserts the ACCEPT signal to a low logic state. 
Thus, the ACCEPT signal indicates whether the pair of bits output from the random 
bit source will generate a corrected bit in the bit stream output by duty cycle 
corrector 200. 

The ACCEPT signal is provided to validation logic 210 together with CLK. 
Compare circuit 208 will assert ACCEPT when any two successive bits in storage 
circuits 204 and 206 are different bits. It is advantageous, however, to compare non- 
overlapping pairs of bits output from random bit source 202 in order to produce a 
uniform duty cycle output stream from duty cycle corrector 200. Validation logic 
210 performs this function. Validation logic 210 asserts the strobe signal STB to a 
high logic state on signal line 218 when ACCEPT is asserted and the desired bit pair 
is stored in storage circuits 204 and 206. When STB is asserted, output circuit 212 
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stores the bit in storage circuit 206. Output circuit 212 may be any storage element 
including a register, a latch, one or more volatile or nonvolatile memory elements, 
an AND gate, or other logic. The bit stored by output circuit 212 is output to signal 
line 214 as the corrected bit corresponding to the bits stored in storage circuits 204 
and 206. 

For an alternative embodiment, the output storage circuit 204 may be 
provided to output circuit 212 instead of the output of storage circuit 206. For this 
embodiment, when STB is asserted, output circuit 212 stores the bit in storage 
circuit 204, and outputs this bit as the corrected bit corresponding to the bits stored 
in storage circuits 204 and 206. 

Figure 3 shows duty cycle corrector 300 that is one embodiment of duty cycle 
corrector 200. Duty cycle corrector 300 includes latches 304 and 306 that are one 
embodiment of storage circuits 204 and 206, respectively; XOR gate 310 that is one 
embodiment of compare circuit 210; transparent latch 308 and AND gate 312 that 
together comprise one embodiment of validation logic 210; and latch 312 that is one 
embodiment of output circuit 212. 

Latches 304 and 306 latch pairs of successive bits from random bit source 202 
for comparison by XOR gate 310. The first bit in a pair of bits is latched in latch 304 
by CLK. On the next clock pulse of CLK, this first bit is latched in latch 306, and the 
next bit output from random bit source 202 is latched in latch 304. If both bits in a 
bit pair are equal, XOR gate 310 deasserts ACCEPT to a zero; if both bits in a bit pair 
are not equal, XOR gate 310 asserts ACCEPT to a one. 

Transparent latch 308 latches CLK from random bit source 302 for clocking 
the AND gate 309 such that STB will be asserted only when ACCEPT is asserted 
and a non-overlapping bit pair is stored in latches 304 and 306. When STB is 
asserted, latch 312 latches the bit output from latch 306 as the corrected bit output 
on signal line 214. In an alternative embodiment, the output of latch 304 may be 
provided to latch 312. This bit may be latched by latch 312 in response to STB. 
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Figure 4 is a flowchart that illustrates the operation of duty cycle corrector 
300. At step 400, a first pair of bits from random bit source 202 are latched into 
latches 304 and 306 with the first bit stored in latch 306 and the second bit stored in 
latch 304. At step 402, XOR gate 310 determines if the two bits of the pair are equal. 
If the pair of bits are equal at step 204, ACCEPT is deasserted, STB is deasserted, 
and the bit pair is rejected or discarded. At step 204, neither bit is latched by latch 
312 and output to signal line 214. If, however, the two bits are determined to be 
different from one another at step 402, the first bit is taken as the output bit at step 
406. 

At step 408, the next overlapping pair of bits from random bit source 202 are 
collected, and the process repeats from step 402. This process repeats until all 
output bit pairs from the random bit source have been processed. Any output bits 
from the random number source that are unpaired cannot be processed and are 
thus rejected. It should be noted that although the first bit of the pair from latch 306 
is supplied as the corrected bit, in an alternative method, the second bit of the pair 
from latch 304 is supplied as the corrected bit. 

A further illustration of the operation of duty cycle corrector 300 is shown in 
Figure 5. Figure 5 shows that the second bit pair (bits 2 and 3) and the third bit 
pairs (bits 4 and 5) generate corrected bits, while the first bit pair (bits 0 and 1) and 
the fourth bit pair (bits 6 and 7) do not. 

Random bit source 202 may output bits that have a first order 
autocorrelation between successively generated bits due to the nature of latches, 
logic gates, and other circuit elements. Thus, even though a duty cycle corrector, 
such as those shown above in Figures 2 and 3, may be able to output substantially a 
random bit pattern having a substantially uniform duty cycle, the likelihood that 
the output of the duty cycle corrector is closer to a uniform duty cycle increases if 
the autocorrelation between bits output by the random bit source is lower. That is, 
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the likelihood that the output of the duty cycle corrector is closer to a uniform duty 
cycle increases if the bits in the random bit stream are unrelated to each other. 

As shown in Figure 5, duty cycle corrector 300 of Figure 3 may be affected by 
first order autocorrelation between the bits in the random bit stream output by 
random bit source 202 as duty cycle corrector 300 operates on consecutive bit pairs. 
Figures 6 shows another embodiment of a duty cycle corrector 600 that reduces the 
affect of first order autocorrelation between bits pairs output by random bit source 
202. Duty cycle corrector 600 reduces first order autocorrelation by discarding a bit 
from random bit source 202 once a bit pair is detected that generates a corrected bit. 

Duty cycle corrector 600 is similar to duty cycle corrector 300, except that 
transparent latch 308 of the validation logic has been replaced with modulo-2 
counter 602. The operation of duty cycle corrector 600 is illustrated in Figure 7. At 
step 700, a first pair of bits from random bit source 202 are latched into latches 304 
and 306 on counts 0 and 1 of modulo-2 counter 602. At step 702, XOR gate 310 
determines if the two bits of the pair are equal. If the pair of bits are equal at step 
704, ACCEPT is deasserted, STB is deasserted, and the bit pair is rejected or 
discarded. At step 704, neither bit is latched by latch 312 and output to signal line 
214. If the bits do not match at step 702, at step 704 ACCEPT is asserted on count 1, 
STB is asserted, and the first bit (or, alternatively, the second bit) is output by 
output by latch 312. STB is also fed back to modulo-2 counter 602 such that when 
STB is asserted modulo-2 counter 602 skips a count and holds the next two clock 
cycles low (i.e., both count 0). This will cause, at step 807, duty cycle corrector 600 
to discard the next bit in the random bit stream from random bit source 202. This 
occurs because even though the next bit is loaded into latch 304, it will be clocked 
through latch 306 before the next time that modulo-2 counter 602 will output count 
1 to AND gate 309. At step 708, the next overlapping pair of bits from random bit 
source 202 are collected, and the process repeats from step 702. This process repeats 
until all output bit pairs from the random bit source have been processed. 
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A further illustration of the operation of duty cycle corrector 600 is shown in 
Figure 8. When the first bit pair (bits 0 and 1) are equal, the bits are discarded and 
no corrected bit is generated for this bit pair. Additionally, STB will not be asserted 
and modulo-2 counter 602 will not skip a count. The second bit pair (bits 2 and 3) 
are not equal and duty cycle corrector 600 outputs a zero, and then causes the next 
bit, bit 4, to be discarded because modulo-2 counter 602 skips a count. The third bit 
pair (bits 5 and 6) are also not equal. Duty cycle corrector 600 outputs a one and 
causes the next bit, bit 7, to be discarded because modulo-2 counter 602 skips a 
count. The last bit pair (bits 8 and 9) are equal and are discarded. 

The discarding of bits 4 and 7 will reduce the first order autocorrelation 
between the second bit pair (bits 2 and 3) and the third bit pair (bits 5 and 6), and 
between the third bit pair and the fourth bit pair (bits 8 and 9). The corrected bit 
stream will be influenced by a less significant second order autocorrelation between 
the second bit pair and the third bit pair, and between the third bit pair and the 
fourth bit pair output by random bit source 202. 

Duty cycle corrector 600 reduces the first order autocorrelation between bits 
generated by the random bit source. It may, however, tend to introduce a non- 
uniformity in the duty cycle of the corrected bit stream as the singular discarded 
bits (e.g., bits 4 and 7 of Figure 8) may not be evenly distributed in the random bit 
stream. 

Figures 9 shows another embodiment of a duty cycle corrector 900 that 
reduces the affect of first order autocorrelation between bits pairs output by 
random bit source 202. Duty cycle corrector 900 reduces first order autocorrelation 
by discarding bits from random bit source 202 that are shifted in on particular 
counts of a modulo-5 counter. 

Duty cycle corrector 900 is similar to duty cycle corrector 300, except that 
transparent latch 308 of the validation logic has been replaced with modulo-5 
counter 902, inverters 904, 906, and 908, AND gates 910 and 912, and NOR gate 914. 
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Modulo-5 counter 902 has three binary output bits CO, CI, and C2. AND gate 910 is 
a three-input AND gate that has a first input coupled C2 via inverter 904, a second 
input coupled to CI, and a third input coupled to CO via inverter 908. AND gate 
912 is a three-input AND gate that has a first input coupled to C2, a second input 
coupled to CI via inverter 906, and a third input coupled to CO via inverter 908. 
NOR gate 914 receives the outputs of AND gates 910 and 912, and drives one input 
of AND gate 309. 

The operation of duty cycle corrector 900 is illustrated in Figure 10. At step 
1000 and count 0 of modulo-5 counter 902, a first bit is loaded into latch 304. This 
bit will be discarded because the signal on signal line 915 will not be asserted for 
counts 0 and 1. At step 1002, a first pair of bits from random bit source 202 is 
latched into latches 304 and 306 on counts 1 and 2. This will cause the first bit to be 
discarded from corrector 1000. At step 1004 and count 2, XOR gate 310 determines 
if the two bits of the pair are equal. If the pair of bits are equal, then at step 1006 
ACCEPT is deasserted, STB is deasserted, and the bit pair is rejected or discarded. 
At step 1006, neither bit is latched by latch 312 and output to signal line 214. If the 
bits do not match at step 1004 and count 2, then at step 1008 ACCEPT is asserted, 
STB is asserted, and the first bit (or, alternatively, the second bit) is output by latch 
312. 

At step 1010, a second pair of bits from random bit source 202 is latched into 
latches 304 and 306 on counts 3 and 4. At step 1012 and count 4, XOR gate 310 
determines if the two bits of the pair are equal. If the pair of bits are equal, then at 
step 1014 ACCEPT is deasserted, STB is deasserted, and the bit pair is rejected or 
discarded. If the bits do not match at step 1012 and count 4, then at step 1016 
ACCEPT is asserted, STB is asserted, and the first bit (or, alternatively, the second 
bit) is output by output by latch 312. This process repeats until all output bit pairs 
from the random bit source have been processed. 
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A further illustration of the operation of duty cycle corrector 900 is shown in 
Figure 11. The first bit, bit 0, is loaded into corrector 900, but will be discarded 
when the first bit pair is loaded. When the first bit pair (bits 1 and 2) are equal, the 
bits are discarded and no corrected bit is generated for this bit pair. The second bit 
pair (bits 3 and 4) are not equal and duty cycle corrector 900 outputs a zero. 
Modulo-5 counter 902 then returns back to count 0 such that bit 5 will eventually be 
discarded. The third bit pair (bits 6 and 7) are also not equal, and duty cycle 
corrector 900 outputs a one. The last bit pair (bits 8 and 9) are equal and are 
discarded. 

The discarding of bits 0 and 5 will reduce the first order autocorrelation 
between the second bit pair (bits 3 and 4) and the third bit pair (bits 6 and 7). The 
corrected bit stream will be influenced by a less significant second order 
autocorrelation between the second and third bit pairs. The discarded bits of count 
0 (count 5, count 10, etc.) are evenly distributed in the random bit stream and their 
exclusion may, thus, result in an approximately uniform duty cycle for the 
corrected bit stream. 

Figures 12 shows another embodiment of a duty cycle corrector 1200 that 
reduces the affect of first order autocorrelation between bits pairs output by 
random bit source 202. Duty cycle corrector 1200 reduces first order autocorrelation 
by discarding bits from random bit source 202 that are between pairs of bits that are 
compared. 

Duty cycle corrector 1200 is similar to duty cycle corrector 300, except that 
transparent latch 308 of the validation logic has been replaced with modulo-3 
counter 1202 that has outputs a high logic signal on signal line 1204 only on count 2. 

The operation of duty cycle corrector 1200 is illustrated in Figure 13. At step 
1300 and count 0 of modulo-3 counter 902, a first bit is loaded into latch 304. This 
bit will be discarded because the signal on signal line 1204 will not be asserted for 
counts 0 and 1. At step 1302, a first pair of bits from random bit source 202 is 
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latched into latches 304 and 306 on counts 1 and 2. This will cause the first bit to be 
discarded from corrector 1200. At step 1304 and count 2, XOR gate 310 determines 
if the two bits of the pair are equal. If the pair of bits are equal, then at step 1306 
ACCEPT is deasserted, STB is deasserted, and the bit pair is rejected or discarded. 
At step 1306, neither bit is latched by latch 312 and output to signal line 214. If the 
bits do not match at step 1304 and count 2, then at step 1308 ACCEPT is asserted, 
STB is asserted, and the first bit (or, alternatively, the second bit) is output by 
output by latch 312. This process repeats until all output bit pairs from the random 
bit source have been processed. 

A further illustration of the operation of duty cycle corrector 1200 is shown 
in Figure 14. The first bit, bit 0, is loaded into corrector 1200, but will be discarded 
when the first bit pair is loaded. When the first bit pair (bits 1 and 2) are equal, the 
bits are discarded and no corrected bit is generated for this bit pair. The fourth bit, 
bit 3, is loaded into corrector 1200, but will be discarded when the second bit pair is 
loaded. The second bit pair (bits 4 and 5) are not equal and duty cycle corrector 
1200 outputs a zero. The seventh bit, bit 6, is loaded into corrector 1200, but will be 
discarded when the third bit pair is loaded. The third bit pair (bits 7 and 8) are not 
equal and duty cycle corrector 1200 outputs a one. The tenth bit, bit 9, is loaded into 
corrector 1200, but will be discarded when the fourth bit pair is loaded. The fourth 
bit pair (bits 10 and 11) are equal and are discarded. 

The discarding of bits 0, 3, 6, 9, etc. will reduce the first order autocorrelation 
between the compared bit pairs. The corrected bit stream will be influenced by a 
less significant second order autocorrelation between the compared bit pairs. The 
discarded bits of counts 0, 3, 6, 9, etc. of modulo-3 counter 1202 are evenly 
distributed in the random bit stream and their exclusion may, thus, result in an 
approximately uniform duty cycle for the corrected bit stream. 

While the duty cycle correctors illustrated above have been described as 
comparing two consecutive bits in the random bit stream of a random bit source, 
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non-consecutive bits may also be compared in alternative embodiments. For 
example, additional storage circuits may be inserted between storage circuits 204 
and 206, or each storage circuit may be clocked by different clocks or different clock 
edges. 

Additionally, output circuit 212 has been shown to receive either the output 
of storage circuit 204 or 206. For an alternative embodiment, compare logic 208 
may include logic that determines the data provided to output circuit 212 in 
response to the data stored in storage circuits 204 and 206. 

The duty cycle correctors described for producing a substantially uniform 
distribution of ones and zeros from a random bit source may be used in conjunction 
with a random number generator for coding and decoding messages sent over a 
computer network. Figure 15 is a block diagram of a computer network for 
transmitting encrypted messages using any of the embodiments described above. 
Network 1500 includes a sending host computer 1502 coupled to a receiving host 
computer 1504 over a network. Both the sending host computer and the receiving 
host computer contain network interface devices that provide the physical and 
logical connections between host computer systems and the network medium. Both 
host computers also contain encryptor/decryptor circuits that perform various 
cryptographic functions for secure data communication. Sending host 1502 
includes encryptor/decryptor circuit 1506, and receiving host 1504 includes 
encryptor/decryptor circuit 1507. The encryptor/decryptor circuits 1506 and 1507 
both include random number generators 1508 and 1509, respectively, that employ 
any of the embodiments of Figure 2, 3, 6, 9, or 12. The random number generators 
are used to generate the public/private key pairs in public/private key systems. 

Various methods of data encryption may be used in network 1500 to ensure 
secure communications between sending host 1502 and receiving host 1504. In one 
embodiment, network 1500 uses a public key (asymmetric) cryptographic system. 
In a public key system, two different keys are used. One key is used by the sender 
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to encode a message and the other key is used by the receiver to decode the coded 
message. In this system, the encryption (public) key may be widely published, but 
the decryption (private) key must be kept secret so that only the intended receiver 
can decode the message. The public and private keys are typically derived together 
from very large primes and random numbers. Thus, effective random number 
generators are required to produce truly random key pairs. 

In an example of a data transfer using a public key system, sending host 1502 
composes a message M for transmission to receiving host 1504. The two keys used 
for the transmission comprise the receiver's public key (PuKr), and the receiver's 
private key (PrKR). The receiver typically selects a public key from a publicly 
available register of keys, and derives the private key from the public key through a 
transformation process known only to the receiver. Thus, the correlation between 
the public key and private key is generally secret and secure. Using the public key, 
the sending host 1502 encodes the message through encryp tor/ decryptor circuit 
1506 to create an encoded message M'. Once encoded, only the appropriate private 
key can decode the message. Upon receiving the message, receiving host 1504 
decodes the message M' with the private key to recover the original message M. 

In one embodiment, encryptor/decryptor circuit 1507 in receiving host 1504 
includes random number generator 1509 that employs any of the embodiments of 
Figures 2, 3, 6, 9, or 12. This technique ensures that the bit distribution from 
random number generator 1509 is sufficiently uniform and random so that there is 
no consistent correlation between private and public keys produced by receiving 
host 1504. As shown in network 1500, encryptor/decryptor circuit 1506 in sending 
host 1502 also includes random number generator 1508 that employs any of the 
embodiments of Figures 2, 3, 6, 9, or 12. This allows sending host 1502 to generate 
secure private keys and public keys when it employs public key transmission. A 
high degree of randomness is required in generating the key pair so as to make a 
non-exhaustive search of private keys exceedingly difficult. 
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In an alternative embodiment, network 1500 uses a single key (symmetric) 
system to perform cryptographic functions. In a single-key system, one key is used 
by both the sender to encrypt the message and by the receiver to decrypt the coded 
message. This system relies on the secrecy of the key. Therefore, a secure process is 
required for disclosure of the key only between the sender and receiver and no 
other party. For this embodiment, different keys are typically used for different 
message transactions. Thus, generation of the various keys requires a random 
process to ensure that a key used for one message transaction cannot be determined 
from any key used for any other message transaction. For this system the random 
number generators within the encryptor/decryptor circuits in each of the host 
computers of network 1500 are used to generate the random key patterns for 
encoding and decoding the message data transmitted between the host computers. 

It should be noted that, although embodiments of the present invention haye 
been discussed in relation to single key and public/private key encryption systems, 
embodiments of the present invention may be used for random number generation 
in other types of cryptographic systems for secure computer networking. 
Moreover, the encryptor/decryptor circuits illustrated in Figure 15 may be used in 
a secure data transmission systems to perform various cryptographic functions such 
as coding and decoding of messages, authentication of transmitted messages, 
verification of digital signatures, and other such functions. 

In the foregoing, a circuit has been described for producing a uniform duty 
cycle random number generator. Although the present invention has been 
described with reference to specific exemplary embodiments, it will be evident that 
various modifications and changes may be made to these embodiments without 
departing from the broader spirit and scope of the invention as set forth in the 
claims. Accordingly, the specification and drawings are to be regarded in an 
illustrative rather than a restrictive sense. 
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CLAIMS 

What is claimed is: 

1 . A method of producing a corrected bit stream from a random bit stream 
output by a random bit source, comprising: 

comparing a pair of bits in the random bit stream with one another; 

discarding the pair of bits when said bits are identical; 

discarding another bit in the random bit stream; and 

outputting one bit of the pair of bits when the pair of bits are not identical. 

2. The method of claim 1 wherein the discarding of the another bit occurs prior 
to the comparing step. 

3. The method of claim 2 wherein the discarding of the another bit occurs 
subsequent to discarding the pair of bits. 

4. The method of claim 1 wherein said step of outputting one bit of the pair of 
bits comprises outputting the first bit of the pair of bits. 

5. The method of claim 1 wherein said step of outputting one bit of the pair of 
bits comprises outputting the second bit of the pair of bits. 

6. The method of claim 1 further comprising synchronously latching the pair of 
bits in a pair of serially coupled latches. 

7. The method of claim 1 further comprising: 
Comparing bits in another, subsequent pair of bits; and 
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Discarding a bit in the random bit stream between the two pairs of compared 

bits. 

8. The method of claim 1 further comprising discarding the another bit in the 
random bit stream regardless of whether the pair of bits are identical or not 
identical. 

9. The method of claim 2 wherein said method of producing a uniform duty 
cycle output from a random bit source is used in a random number generator 
operable to produce random binary numbers for use in a cryptographic system for 
secure communications between a plurality of computers in a network. 

10. A duty cycle corrector circuit for generating a corrected random bit stream 
from a random bit stream output by a random bit source, the duty cycle corrector 
circuit comprising: 

a first storage circuit having an input and an output, the input coupled to 
receive the random bit stream from the random bit source; 

a second storage circuit having an input and an output, the input coupled to 
the output of the first storage circuit; 

a compare circuit coupled to the output of the first storage circuit and the 
output of the second storage circuit; and 

validation logic having a first input to receive an output of the compare 
circuit, and a second input to receive a periodic signal, the validation logic to output 
a signal that indicates when data stored in the first storage circuit or second storage 
circuit is a bit in the corrected bit stream. 

11. The duty cycle corrector circuit of claim 10 wherein the first and second 
storage circuits comprise latches. 
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12. The duty cycle corrector circuit of claim 10 wherein the compare circuit 
comprises an XOR gate. 

13. The duty cycle corrector circuit of claim 10 further comprising an output 
circuit coupled to receive the signal output by the validation logic and the bit stored 
in the first or second storage circuit, the output circuit to output the corrected bit in 
the bit stream. 

14. The duty cycle corrector circuit of claim 13, wherein the output circuit 
comprises a storage circuit. 

15. The duty cycle corrector circuit of claim 10 wherein the validation logic 
comprises: 

a transparent latch coupled to a clock output of the random bit source; and 

an AND gate having a first input coupled to an output of the transparent 
latch, and a second input coupled to the output of the compare circuit. 

16. The duty cycle corrector circuit of claim 10 wherein the validation logic 
comprises: 

a modulo-X counter coupled to a clock output of the random bit source, 
wherein X is an integer greater than 1; and 

an AND gate coupled having a first input coupled to an output of the 
modulo-X counter, and a second input coupled to the output of the compare circuit. 

17. A computer comprising: 
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a network interface device operable to send and receive messages between 
said computer and a network medium; and 

an encryption /decryption circuit operable to encode and decode messages 
transmitted from said computer, said encryption/ decryption circuit comprising a 
random number generator operable to produce a random bit stream, said random 
number generator comprising: 

a random number generator operable to output an uncorrected bit stream; 

and 

a duty cycle corrector circuit comprising: 

a first storage circuit having an input and an output, the input 
coupled to receive the uncorrected random bit stream from the random bit source; 

a second storage circuit having an input and an output, the input 
coupled to the output of the first storage circuit; 

a compare circuit coupled to the output of the first storage circuit and 
the output of the second storage circuit; and 

validation logic having a first input to receive an output of the 
compare circuit, and a second input to receive a periodic signal, the validation logic 
to output a signal that indicates when data stored in the first storage circuit or 
second storage circuit is a bit in a corrected bit stream. 

18. The computer of claim 17 wherein said encryption/decryption circuit is 
further operable to encode and decode messages transmitted and received by said 
computer using a cipher-based cryptographic method. 

19. The computer of claim 19 wherein said cipher-based cryptographic method 
is a single key system. 
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20. The computer of claim 19 wherein said cipher-based cryptographic method 
is a public key/ private key system. 
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